Privacy Policy
1. Data Controller:
Partaharjun Puutarha Oy
Business ID: 2061174-9
Partaharjuntie 431
76280 Partaharju
Contact Person for Registry Matters
Hanna Suhonen
hanna.suhonen@partaharju.fi
+358 400 931 022
2. Data Subjects
Customers, potential customers, employees, and event participants.
3. Purpose of Processing Personal Data
Basis for Maintaining the Registry
- Personal data is processed based on the data subject’s customer relationship.
- Personal data is processed based on consent (e.g., for lotteries and event registrations where consent has been requested).
Purpose of Data Processing and Use of the Registry
Personal data is processed only for predefined purposes, which include:
- Managing customer relationships
- Informing about our services
4. Personal Data Stored in the Registry
The customer registry includes the following information:
Contact Information
- Name
- Address
- Email
- Phone number
Customer Information
- Details of purchased products/services
5. Rights of the Data Subject:
The data subject has the following rights. Requests concerning these rights should be sent to hanna.suhonen@partaharju.fi.
Right of Access
The data subject has the right to check the personal data stored about them.
Right to Rectification
The data subject has the right to request the correction of incorrect or incomplete information.
Right to Object
The data subject has the right to object to the processing of their personal data if they believe it has been processed unlawfully.
Right to Prohibit Direct Marketing
The data subject has the right to prohibit the use of their data for direct marketing.
Right to Erasure
The data subject has the right to request the deletion of their personal data if processing is no longer necessary. Upon request, the data will either be deleted or the data controller will provide a justified reason why deletion is not possible.
It should be noted that the data controller may have a legal or other right not to delete the requested information. The data controller is required to retain accounting records for the period specified in the Accounting Act (Chapter 2, Section 10) (10 years). Therefore, accounting-related data cannot be deleted before this period expires.
Right to Withdraw Consent
If the processing of personal data is based solely on consent and not, for example, on a customer relationship or membership, the data subject may withdraw their consent.
Right to Appeal to the Data Protection Ombudsman
The data subject has the right to request the restriction of processing if there is a dispute over the accuracy of the data.
Right to Lodge a Complaint
The data subject has the right to file a complaint with the Data Protection Ombudsman if they believe that the processing of their personal data violates applicable data protection legislation.
Contact information for the Data Protection Ombudsman:
www.tietosuoja.fi/fi/index/yhteystiedot.html
6. Regular Sources of Data
Customer data is regularly obtained from:
- The customer when establishing a customer relationship
- The customer via an online form
7. Regular Data Disclosures
Data is not disclosed for marketing purposes outside Partaharjun Puutarha Oy.
We ensure that all our service providers comply with data protection regulations.
8. Data Retention Period
- Personal data is generally processed as long as the customer relationship is active.
- The data subject can unsubscribe from our marketing list via the link included in every marketing email we send.
9. Data Processors:
The data controller and its employees process personal data. Personal data processing may also be partially outsourced to a third party, in which case we ensure through contractual arrangements that the data is processed in compliance with applicable data protection legislation and appropriately.
10. Data Transfers Outside the EU:
Data may be transferred outside the EU or EEA if a customer relationship management software used by the data controller changes and stores data outside these areas.
11. Automated Decision-Making and Profiling:
We do not use personal data for automated decision-making or profiling.
